CVE-2022-47095

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevcparsevpsextension function of mediatools/avparsers.c...

CVE-2022-47662

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is affected by a vulnerability causing a segment fault (stack overflow) from an infinite recursion in Media_GetSample (isomedia/media.c:662). The issue enables local exploitation leading to a crash; no in‑document exploit details are provided. Mitigations in ...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which stems from...

CVE-2022-47086

GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gfsmloadinitswf at scenemanager/swfparse.c...

CVE-2022-47654

GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8261...

CVE-2022-47089

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gfvvcreadspsbsinternal function of mediatools/avparsers.c...

CVE-2022-47656

GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8273...

CVE-2022-47656

GPAC MP4box 2.1-DEV-rev617-g85ce76efd is affected by CVE-2022-47656 due to a buffer overflow in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c:8273). Public sources in the connected documents consistently describe a buffer overflow vulnerability with a CVSS v3.1 base score of...

CVE-2022-47658

GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by a buffer overflow in gf_hevc_read_vps_bs_internal (media_tools/av_parsers.c:8039). The CVE-2022-47658 entry is supported by multiple sources (NVD/OSV/GREL) indicating a HIGH-severity, local-exploitation vulnerability with potential impact to co...

CVE-2022-47094

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmxm2ts.c:343 in m2tsdmxdeclarepid...

CVE-2022-47087

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c...

CVE-2022-47659

GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gfbsreaddata...

CVE-2022-47658

GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gfhevcreadvpsbsinternal of mediatools/avparsers.c:8039...

CVE-2022-47661

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via mediatools/avparsers.c:4988 in gfmedianaluaddemulationbytes...

CVE-2022-47654

GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8261...

CVE-2022-47095

CVE-2022-47095 affects GPAC MP4box 2.1-DEV-rev574-g9d5bb184, vulnerable to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c). The impact is reported as high (CVE-3.1 metrics: LOCAL, HIGH/CONF, HIGH/AV, with user interaction required). Connected sources confirm the vulnerabi...

CVE-2022-47659

GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to a Buffer Overflow in gf_bs_read_data (CVE-2022-47659). The issue can lead to Denial of Service or potentially arbitrary code execution. Affected product is GPAC MP4box; impact is local, requires user interaction per CVSS data. Debian advisori...

CVE-2022-47661

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via mediatools/avparsers.c:4988 in gfmedianaluaddemulationbytes...

CVE-2022-47092

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8316...

CVE-2022-47092

GPAC MP4box 2.1-DEV-rev574-g9d5bb184 contains an integer overflow in gf_hevc_read_sps_bs_internal (media_tools/av_parsers.c:8316). Public-facing sources in the provided documents confirm this CVE-2022-47092 issue and its basic impact (CVSS v3.1: HIGH, with local attack vector, no privileges requi...